WLCG AuthZ Call

Thursday 26 Oct 2023, 16:00 → 17:00 Europe/Zurich

Previous Actions:

• Action, Maarten: Start a VO information in token (for accounting purposes) discussion on the Mailing list late August to revisit and converge on a plan once summer holidays are more likely to be over
  • No need to follow up yet - just for tracking
• Action, Mischa: Mischa to look to setup a "neutral" mailing list to facilitate cross-community discussions around unified token profile
  • Completed - email inviting WLCG AuthZ to register has been sent

Proposed agenda:

• TBC

 

Zoom meeting:

Link below, in the videoconference section. Please ensure you are signed in to Indico to see the meeting password!

Next Meeting: 

• Nov 9th overlaps with DC24 workshop
• Nov 23th?

Present: Tom D (Minutes), Linda C, Mischa S, Dave D, Dimitrios C, Petr V, Matt D, Francesco G, Federica A, Mine AC

Apologies: John S. DS, Dave K

Meeting was called short due to attendance.

Mischa:

• Made a Nikhef mailing list, people should be able to register
• Has sent to WLCG, appint, and SciTokens
• Reasonable number of signups at this stage, but waiting until next week before sending out any starting mails
• First topic will be "Open Issues", then look to launch a kick-off meeting
  • Establishing differences between established profiles also
  • Timings issue may be awkward here due to interest from US and Asian groups
• Meeting plans and details should then be worked from there
• TIIME in January would be a good chance to meet about this
  • Details about this meeting are: https://tiime-unconference.eu/ 

Petr:

• Defining unknown scopes by users? Is there a ticket for this?
• Scopes needs to be reviewed, with custom scopes being a delicate matter.
  • Names need to be restricted to avoid conflicts with potential system scopes
  • Some thoughts, but don't want to break existing uses
  • Open discussion before any implementations
• Petr views that full arbitrary scopes should not be possible
  • A prefix for the scope could make this more approachable
• Francesco: Custom scopes should be matched only as strings in the next release, not as parametric scopes

Quite a few of us will be at the DC24 planning meeting and report to the AuthZ WG as needed.